exa-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text can enter the LLM context via Exa’s runtime web retrieval: scripts/exa_search.py calls client.search_and_contents(...) with --text/--highlights, and the returned results[].text / results[].highlights (scraped from public web pages by Exa) are then emitted for downstream LLM use.